CVE-2026-25583: iccDEV vulnerable to Heap Buffer Overflow in CIccFileIO::Read8()
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8() when processing malformed ICC profile files via unchecked fread operation. This issue has been patched in version 2.3.1.3.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25583?
CVE-2026-25583 is classified as a high severity vulnerability due to the potential for exploitation leading to memory corruption.
How do I fix CVE-2026-25583?
To mitigate CVE-2026-25583, upgrade to version 2.3.1.3 or later of the iccDEV software.
What kind of vulnerability is CVE-2026-25583?
CVE-2026-25583 is a heap buffer overflow vulnerability in the CIccFileIO::Read8() function.
What products are affected by CVE-2026-25583?
CVE-2026-25583 affects all versions of iccDEV prior to 2.3.1.3.
Is there any workaround for CVE-2026-25583?
There are no known workarounds for CVE-2026-25583; updating to the fixed version is required.